DNS and Active Directory best practices.

 

1. DNS is pointing to itself in TCP/IP property.

2. You have configured Forwarders tab in DNS Server property to access Internet.

3. You have checked the box “Register this connection in DNS” in TCP/IP property.

4. SOA RR entry is pointing to the same DNS Server address. Expand Forward Lookup Zone > domain_name.com and then in Right Pane find the SOA and NS records and make sure they are configured to use this DNS Server’s IP Address.

5. If you have *two NICs* make sure DNS is only *listening* on the LAN Interface.

6. Issue Ipconfig /registerdns command in Domain controller.

7. Remove if you have configured your Internal NIC to use ISP DNS server address.

8. And also make sure DNS Dynamic update is enabled on DNS Zone.

9. Make sure clients are configured to use Domain_name.com suffix.

This DNS server won’t forward requests to ISP DNS server until it is configured to do so. You need to configure this server using Forwarders tab in DNS Server property.

Ref:

For Internet access:

For internet access, delete the root zone on your DNS in your forward lookup zones. Then open the properties page of your DNS server and configure forwarders to point to your ISP’s DNS.

Using Forwarders in DNS: –

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/1cd13da9-ed0a-4814-b0bb-

e46e8ac1e321.mspx

Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS
http://support.microsoft.com/?kbid=291382
Best practices for DNS client settings in Windows 2000 Server and in Windows Server 2003
http://support.microsoft.com/?kbid=825036
HOW TO: Troubleshoot DNS Name Resolution on the Internet in Windows 2000
http://support.microsoft.com/?kbid=316341
HOW TO: Configure DNS for Internet Access in Windows 2000
http://support.microsoft.com/?kbid=300202

Troubleshooting Common Active Directory Setup Issues in Windows 2000
http://support.microsoft.com/?kbid=260371

10 DNS Errors That Will Kill Your Network
http://www.mstraining.com/misc/10_dns_errors_that_will_kill_you.htm
Troubleshooting Active Directory DNS Errors in Windows 2000
http://www.microsoft.com/windows2000/dns/tshoot/dns_tshoot2A.asp
Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS
http://support.microsoft.com/?kbid=291382
Best practices for DNS client settings in Windows 2000 Server and in Windows Server 2003
http://support.microsoft.com/?kbid=825036
SRV Resource Records May Not Be Created on Domain Controller
http://support.microsoft.com/?kbid=239897
How to Verify the Creation of SRV Records for a Domain Controller
http://support.microsoft.com/?kbid=241515
How Domain Controllers Are Located in Windows
http://support.microsoft.com/?kbid=247811
How Domain Controllers Are Located in Windows XP
http://support.microsoft.com/?kbid=314861
HOW TO: Configure DNS for Internet Access in Windows Server 2003
http://support.microsoft.com/?kbid=323380
HOW TO: Troubleshoot DNS Name Resolution on the Internet in Windows Server 2003
http://support.microsoft.com/?kbid=816567

Determining the Server GUID of a Domain Controller
http://support.microsoft.com/?kbid=224544
GUID Records Are Not Registered If MX Record with Wildcard Character Is Present
http://support.microsoft.com/?kbid=325208
Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS
http://support.microsoft.com/?kbid=291382
Windows 2000 DNS and Active Directory Information and Technical Resources
http://support.microsoft.com/?kbid=298448
Setting Up the Domain Name System for Active Directory
http://support.microsoft.com/?kbid=237675
HOW TO: Troubleshoot DNS Name Resolution on the Internet in Windows 2000
http://support.microsoft.com/?kbid=316341
HOW TO: Configure DNS for Internet Access in Windows 2000
http://support.microsoft.com/?kbid=300202

3 thoughts on “DNS and Active Directory best practices.”

  1. I’m somewhat new to network administration and setup, but learning quickly. DNS for all its significance in the TCP/IP domain structure is still a plug & play process. It works or everything else stops. A lot like a 2 year old grandchild.

    So my problem is one of backtracking the various hardware, property settings, and not shut down the system or the household internet connection the house may need. Pretty much the same situation in a small business or enterprise. So I’m setting up a small computer lab, subscribed to TechNet, downloaded various Servers and OS’s and aim to achieve Certifications leading to an MCSA.

    The internet helps tremendously in searching out answers when the links are current and the connections do their part. Here is one from your “DNS and Active Directory best practices” page that seems to be defunct.

    10 DNS Errors That Will Kill Your Network
    http://www.mstraining.com/misc/10_dns_errors_that_will_kill_you.htm

    It seemed a likely candidate for a potential answer, unfortunatly it only connects to an ISP default search page.

Leave a Reply

Your email address will not be published. Required fields are marked *